Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: QuuRS3PbXM69TST2Q4p7LFA6IhzZ7gl2FMBznqSbUQ0=
Subject key identifier: AC:5D:ED:77:F3:E3:65:BF:3E:40:0A:3B:6D:96:AB:03:D4:CD:2C:06
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 019D3909E8655E062EA69DF5DB1EE077906A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 0D43
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: liOq_bxUZWYwUQJdTmCeIacGUbE.roa (hash: GqI5g/TpMiOOPnrSMEIczXK7pRHXISy9b4nuM+CDj4s=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: HFuIaxxlp42P0e7p2rq5lvD7Alpn3beSI0sznLviaWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e8:65:5e:06:2e:a6:9d:f5:db:1e:e0:77:90:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=ac5ded77f3e365bf3e400a3b6d96ab03d4cd2c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:fa:21:82:5f:28:d4:a0:bc:4f:19:5e:21:
d4:00:bc:98:1b:64:ca:63:4d:2b:94:32:53:75:21:
0d:da:ec:6e:8f:29:21:cf:f5:44:7f:e4:25:83:ce:
74:c4:5b:d1:5d:75:ea:e5:ca:3a:f2:ba:19:fc:d0:
cc:e1:23:eb:22:58:78:09:c6:4e:e8:b8:e1:fe:e0:
74:b1:6b:b1:b4:0f:67:78:d9:96:9c:a2:6e:b7:4b:
53:8d:c3:dd:b4:ef:74:91:63:0a:93:7d:67:5e:d8:
69:04:ea:36:e9:b0:45:a4:45:4d:bb:33:05:1a:a6:
54:59:1a:b8:4b:fb:f4:9d:97:e1:3c:96:a2:ec:98:
f4:21:a5:1a:4a:f8:a8:ee:0f:e2:3a:99:12:0b:c4:
70:71:55:2e:87:47:1f:d9:72:62:2f:b5:b7:7e:3e:
7d:d0:88:41:71:3f:6b:c5:80:eb:0a:3f:ad:ae:87:
3d:4e:2a:5e:d3:fb:3b:b9:4f:6a:36:a9:da:af:80:
44:9b:5b:66:e3:73:c4:fc:7a:e6:6b:70:96:c1:0f:
9e:b1:4f:35:e5:7d:2d:47:3d:ca:8f:7d:a7:f2:13:
86:f3:2c:ba:ac:7a:03:32:42:64:62:29:51:d0:3e:
f8:c3:38:19:09:2f:69:b9:86:13:80:9b:a9:d9:89:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5D:ED:77:F3:E3:65:BF:3E:40:0A:3B:6D:96:AB:03:D4:CD:2C:06
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9e:0c:3b:f6:65:59:62:9a:5d:b3:76:1f:50:bc:a5:ee:d8:
82:b6:5f:8c:bc:25:27:e7:6e:80:6b:96:57:94:1c:28:20:db:
a2:8e:93:6c:b1:5e:d7:3a:d3:e9:c5:2a:97:fe:89:34:30:f8:
4d:36:3a:0b:47:1e:de:47:7c:0a:fb:46:37:d2:f2:13:f9:20:
23:21:d3:4e:d5:a3:fa:db:8a:9b:d2:7f:d7:cc:95:4e:07:1e:
95:e0:af:b6:08:50:7e:2f:9b:ef:88:6d:02:5e:22:95:dc:6f:
2e:fc:48:08:22:e8:42:37:3c:f4:38:3e:69:2e:39:cd:98:04:
23:ac:a0:7f:85:38:d3:10:f9:fa:c9:fe:34:fa:b9:76:17:8f:
9a:f0:b1:17:ed:6a:79:60:25:4c:ad:d0:b4:08:0d:96:01:8f:
10:83:9e:c7:a1:54:0b:25:a2:c9:f9:43:5e:81:58:5d:b4:e3:
b4:5c:6c:4b:10:2e:80:da:e6:11:17:35:16:63:41:b6:f3:3d:
1e:5a:21:b6:f6:4e:1f:0a:c7:10:c4:14:d5:95:98:bb:b0:37:
69:af:d1:58:b7:81:b5:80:06:38:ba:23:cf:c3:b8:6c:5d:00:
54:e1:ef:0f:64:f6:6c:56:d0:c4:4c:69:ad:13:a2:f6:87:87:
54:b8:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:34 2026 by rpki-client